luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(go): port memory-map detector tranche

Browse source
This commit is contained in:
Luna 2026-07-11 01:19:56 -07:00
parent c6f7219de8
commit 6a27e6e770
No known key found for this signature in database
13 changed files with 377 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -66,9 +66,10 @@ Project docs:
Phase 1 now also has an **experimental Go sidecar** under `go-agent/`. It emits
the same `enodia.event.v1` envelope and captures an injectable `/proc` process
and `ss` socket view. The parity-checked cohort is `reverse_shell`,
and memory-map view plus `ss` sockets. The parity-checked cohort is `reverse_shell`,
`ld_preload`, `deleted_exe`, `input_snooper`, `credential_access`,
`stealth_network`, and `egress`. It is stdout-only and does not replace,
`stealth_network`, `memory_obfuscation` (including mapped hide/injection
libraries), and `egress`. It is stdout-only and does not replace,
install over, or write state for the Python daemon; Python remains authoritative
until subsystem parity is complete.